CheckPoint 156-315.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-315.81.20 Online Questions & Answers

• Question 111:

  Which type of NAT translates both IP address and port?

  A. Static NAT
  B. Hide NAT
  C. Manual NAT
  D. Automatic NAT
  B. Hide NAT

  ---

  Explanation

  Hide NAT translates both the IP address and the port, allowing multiple internal hosts to share a single external IP address.

• Question 112:

  Check Point Support in many cases asks you for a configuration summary of your Check Point system.

  This is also called:

  A. sysinfo
  B. cpsizeme
  C. cpinfo
  D. cpexport
  C. cpinfo

• Question 113:

  You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don't have a budget to perform a hardware upgrade at this time. To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher.

  How can you enable them?

  A. fw ctl multik dynamic_dispatching on
  B. fw ctl multik dynamic_dispatching set_mode 9
  C. fw ctl multik set_mode 9
  D. fw ctl multik pq enable
  C. fw ctl multik set_mode 9

  ---

  Explanation

  To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher. You can enable them by using the command fw ctl multik set_mode 9. This command sets the SecureXL mode to 9, which means that Priority Queues are enabled and Dynamic Dispatcher is fully enabled.

  References:

  SecureXL Mechanism

• Question 114:

  What are the two ClusterXL Deployment options?

  A. Distributed and Full High Availability
  B. Broadcast and Multicast Mode
  C. Distributed and Standalone
  D. Unicast and Multicast Mode
  A. Distributed and Full High Availability

  ---

  Explanation

  The two ClusterXL Deployment options are Distributed and Full High Availability. Distributed deployment means that each cluster member has its own Security Management Server and synchronizes with other members. Full High Availability deployment means that one cluster member is active and handles all traffic, while the other members are in standby mode and ready to take over in case of a failure. The other options are not valid ClusterXL Deployment options, but rather ClusterXL Modes or ClusterXL Load Sharing Methods.

  [Check Point Security Expert R81 ClusterXL Administration Guide], page 6.

• Question 115:

  CPM process stores objects, policies, users, administrators, licenses and management data in a database.

  This database is:

  A. MySQL
  B. SOLR
  C. MarisDB
  D. PostgreSQL
  D. PostgreSQL

• Question 116:

  In what way is Secure Network Distributor (SND) a relevant feature of the Security Gateway?

  A. SND is used to distribute packets among Firewall instances
  B. SND is a feature to accelerate multiple SSL VPN connections
  C. SND is a feature of fw monitor to capture accelerated packets
  D. SND is an alternative to IPSec Main Mode, using only 3 packets.
  A. SND is used to distribute packets among Firewall instances

• Question 117:

  The Event List within the Event tab contains:

  A. a list of options available for running a query.
  B. the top events, destinations, sources, and users of the query results, either as a chart or in a tallied list.
  C. events generated by a query.
  D. the details of a selected event.
  C. events generated by a query.

  ---

  Explanation

  The Event List within the Event tab contains events generated by a query. The Event List shows the events that match the query criteria, such as time range, filter, and aggregation. The events can be sorted by different columns, such as severity, time, action, and source 3. The other options are either not part of the Event tab or not related to the Event List.

  References:

  Check Point R81 Logging and Monitoring Administration Guide

• Question 118:

  What is correct statement about Security Gateway and Security Management Server failover in Check Point R81.

  X in terms of Check Point Redundancy driven solutions?

  A. Security Gateway failover as well as Security Management Server failover is an automatic procedure.
  B. Security Gateway failover is an automatic procedure but Security Management Server failover is a manual procedure.
  C. Security Gateway failover is a manual procedure but Security Management Server failover is an automatic procedure.
  D. Security Gateway failover as well as Security Management Server failover is a manual procedure.
  B. Security Gateway failover is an automatic procedure but Security Management Server failover is a manual procedure.

• Question 119:

  Fill in the blank: The command __________ provides the most complete restoration of a R81 configuration.

  A. upgrade_import
  B. cpconfig
  C. fwm dbimport -p <export file>
  D. cpinfo -recover
  A. upgrade_import

• Question 120:

  What is the default shell for the command line interface?

  A. Expert
  B. Clish
  C. Admin
  D. Normal
  B. Clish

  ---

  Explanation

  What is the default shell for the command line interface? The default shell for the command line interface is Clish. Clish is a shell that provides a menu-based interface for configuring various system settings, such as network interfaces, routing, DNS, NTP, SNMP, SSH, etc. Clish also provides help and completion features for easier navigation. To switch from Clish to Expert mode, which allows running Linux commands, use the command expert.

  References:

  Gaia Administration Guide R81, page 29.